PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8341,53070k+Output is not escaped
#102WP Extended – The Ultimate WordPress Toolkit211,253398600Non Singular String Literal Domain
#103WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#10412 Step Meeting List22148594900Non-prefixed global variable
#105Frontend Admin by DynamiApps225,9433,2329k+Text Domain Mismatch
#106WP Sessions Time Monitoring Full Automatic228691,529500Non-prefixed global variable
#107Advanced Classifieds & Directory Pro221,2293,5122k+Non-prefixed global variable
#108Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159230k+Unsafe printing function
#109All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos229122,88520k+Non-prefixed global variable
#110Backup Bolt225801,313800Non-prefixed global variable
#111Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD226697691k+Output is not escaped
#112Cleanup Action Scheduler225451,3061k+Non-prefixed global variable
#113Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch
#114Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#115Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates222,4384,4066k+Non-prefixed global variable
#116RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6525,1458k+Non-prefixed global variable
#117Daily Prayer Time229701,7911k+Non-prefixed global variable
#118Directorist: AI-Powered Business Directory, Listings & Classified Ads225602,20220k+Non-prefixed global variable
#119DirectoryPress – Business Directory And Classified Ad Listing224,7872,795700Text Domain Mismatch
#120Download Manager222,4441,489100k+Output is not escaped
#121Diverse Solutions IDX Real Estate Listings & MLS Search227456051k+Heredoc Output Not Escaped
#122Dynamic QR Code – generator222382085k+Missing direct file access protection
#123E2Pdf – Export Pdf Tool for WordPress221,08184710k+Unsafe printing function
#124easyReservations225,3072,480800Text Domain Mismatch
#125EleSpare – News, Magazine and Blog Addons for Elementor227331,42310k+Non-prefixed global variable
#126Employee Spotlight – Team Member Showcase & Meet the Team Plugin22247689400Non-prefixed hook name
#127ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce228305,9785k+Direct Query
#128Estatik Real Estate Plugin223,08432510k+Text Domain Mismatch
#129Events Maker by dFactory225888191k+Output is not escaped
#130Events Manager – Calendar, Bookings, Tickets, and more!224,7165,69070k+Output is not escaped
#131Falang multilanguage for WordPress227167701k+Output is not escaped
#132FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment221538437k+Non-prefixed global variable
#133Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#134Frontend Dashboard22375941500Non-prefixed function
#135FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#136GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4523,94510k+Output is not escaped
#137Happy Addons for Elementor22652446400k+Output is not escaped
#138Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03172220k+Unsafe printing function
#139History Log by click5226751,290400Direct Query
#140Csomagpontok és Címkék WooCommerce-hez222,0027697k+Text Domain Mismatch
#141If-So Dynamic Content – Elementor & All Page Builders Personalization229698447k+Output is not escaped
#142Insert or Embed Articulate Content into WordPress226591,4372k+Non-prefixed global variable
#143Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#144JCC Payment Gateway for Woocommerce222,2731,136600Text Domain Mismatch
#145LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,4263,57270k+Non-prefixed global variable
#146Custom Login Page Customizer – Login Designer225881,45530k+Non-prefixed global variable
#147Mail Baby SMTP22385699600SQL query is not prepared
#148Mailchimp for WooCommerce22524658200k+Non-prefixed global variable
#149MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder221,1203,0122k+Non-prefixed global variable
#150MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped